common front-end security problem